Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-02-17...py.exe

windows7-x64

7

2024-02-17...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_d5798bbb18f9a4c427149c313251d6a3_mafia_nionspy

  • Size

    274KB

  • Sample

    240217-wcjgmahg69

  • MD5

    d5798bbb18f9a4c427149c313251d6a3

  • SHA1

    7613bd6ec998213fedd6705850d8ce6b78d12101

  • SHA256

    2b973867e396978b50c171a97a2a8391301ced5cca9806eb573fad31d35e52dd

  • SHA512

    c7c10ab838d2c044ea6386898aaa5ed0cc4a46c6c9301bfc43f1db2ea9be32c54b108202f2843505059fb08015dcd2e2d1711a54162480f5865f828b4dea3858

  • SSDEEP

    6144:MYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:MYvEbrUjp3SpWggd3JBPlPDIQ3g

Score
7/10

Malware Config

Targets

    • Target

      2024-02-17_d5798bbb18f9a4c427149c313251d6a3_mafia_nionspy

    • Size

      274KB

    • MD5

      d5798bbb18f9a4c427149c313251d6a3

    • SHA1

      7613bd6ec998213fedd6705850d8ce6b78d12101

    • SHA256

      2b973867e396978b50c171a97a2a8391301ced5cca9806eb573fad31d35e52dd

    • SHA512

      c7c10ab838d2c044ea6386898aaa5ed0cc4a46c6c9301bfc43f1db2ea9be32c54b108202f2843505059fb08015dcd2e2d1711a54162480f5865f828b4dea3858

    • SSDEEP

      6144:MYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:MYvEbrUjp3SpWggd3JBPlPDIQ3g

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks